HashiCorp security advisory (AV26-1019)

Serial number: AV26-1019Date: October 8, 2026 As of October 7, 2026, HashiCorp is affected by vulnerabilities in the following products: Vault Community Edition Prior to 2.1.2 Vault Enterprise Prior to 1.19.23 Prior to 1.20.17 Prior to 1.21.12 Prior to 2.1.2 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. HCSEC-2026-41 - Vault Vulnerable to Arbitrary Code Execution via Plugin Catalog Entries Restored From Raft Snapshots - Security - HashiCorp Discuss Security - HashiCorp Discuss